Privacy Policy

We collect the following information when you use TradeCloner:

• Account information: Name, email address, and password (hashed)
• Broker credentials: OAuth tokens and API keys for connected broker accounts, encrypted at rest using AES-256-GCM
• Trading data: Trade history, positions, balances, and P&L from connected broker accounts
• Usage data: Feature usage, copy event logs, and performance metrics

• To provide and operate the trade copying service
• To execute orders on your behalf through connected broker APIs
• To display your trading performance, analytics, and journal data
• To send service notifications (copy failures, risk alerts, account updates)
• To improve the Service and fix bugs

We take security seriously:

• Broker tokens are encrypted at rest using AES-256-GCM with a master key
• Passwords are hashed using bcrypt
• All API communication uses HTTPS/TLS
• Database access is restricted and audited

We do not sell, rent, or share your personal information or trading data with third parties, except:

• With broker APIs (Tradovate, NinjaTrader, ProjectX) to execute your trades
• With payment processors (Stripe) to process subscription payments
• When required by law or legal process

We retain your data for as long as your account is active. Upon account deletion, we remove your personal data and broker credentials within 30 days. Anonymized trading statistics may be retained for service improvement.

You may request to access, correct, or delete your personal data by contacting us at [email protected]. You may disconnect broker accounts and revoke API access at any time through the Connections page.

We use a minimal set of essential cookies and local storage to keep you signed in and remember your preferences. See our Cookie Policy for the full breakdown.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification.

For privacy-related questions, contact us at [email protected].